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Introduction 

Water  and  wastewater  infrastructure  (Water  Sector)  protection  is  a  shared  responsibility.  The  Water  Government 
Coordinating  Council  (WGCC)  is  chaired  by  the  U.S.  Environmental  Protection  Agency  (EPA)  and  made  up  of 
representatives  from  federal,  regional,  state,  local,  and  tribal  government  programs.  The  Water  Sector  Coordinating 
Council  (WSCC)  members  include  municipal  and  investor  owned  water  and  wastewater  utilities,  associations,  and  regional 
organizations.  Together,  these  coordinating  councils  form  the  public-private  partnership  through  which  security  partners 
collaborate  to  plan  and  implement  programs  aimed  at  achieving  a  common  vision.1 

As  illustrated  in  Figure  1.1,  the  number  and  scope  of  partners  in  responding  to  a  catastrophic  event  can  be  significant.  The 
figure  includes  local  responders  in  the  inner  circle,  with  federal,  state,  and  regional  partners  in  the  outer  circle. 2  To  guide 
future  efforts,  the  Water  Sector  has  developed  two  roadmaps  designed  to  align  security  partner  efforts  and  ensure  security 
needs  are  addressed  in  a  timely  and  efficient  manner. 


The  Water  Sector's  security  vision  is  a  secure  and  resilient  drinking  water  and 
wastewater  infrastructure  that  provides  clean  and  safe  water  as  an  integral 
part  of  daily  life.  This  Vision  assures  the  economic  vitality  of  and  public 
confidence  in  the  Nation's  drinking  water  and  wastewater  through  a  layered 
defense  of  effective  preparedness  and  security  practices  in  the  sector. 


In  October  2008,  the  WSCC  released  the  WSCC  Strategic  Roadmap ,  which  reflects  the  WSCC’s  needs  and  priorities  for 
reducing  infrastructure  risk  in  2009.  Building  on  this  effort,  the  WSCC  and  WGCC  have  come  together  to  develop 
the  Roadmap  to  a  Secure  &  Resilient  Water  Sector.  The  roadmap  content  is  the  result  of  a  series  of  conference  calls  and  one 
workshop  held  by  members  of  the  CIPAC  Water  Sector  Strategic  Planning  Working  Group.  For  more  information  on  the 
roadmap  development  process,  please  refer  to  Appendix  A. 
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Figure  1 .1  Examples  of  Security  Partners  in  the  Water  Sector 


Federal  Bureau  of 
Investigation 


US  EPA 


Centers  For  Disease 
Control  and  Prevention 


State  Emergency 
Management  and 
Homeland  Security 
Agencies 


Department  of 
Homeland  Security 


Local  Health 
Department 

Local  Law 
Enforcement 

National  Response 
Center 

Local  Fire,  EMS, 
and  HazMat 

v  m 

Water  and 
Wastewater 
Utility 

Local  Civil 
Government 

State  Emergency 
Responders 

Local  Emergency 
Planning 
Committees 

P 

Public  Health  and 
Environmental 
Laboratories 

State  Government 

State  Law 
Enforcement 


State  Drinking  and  Waste  Neighboring 

Water  Primacy  Agencies  Utilities 


Media 


Purpose 

The  purpose  of  the  roadmap  is  to  establish  a  strategic  framework  that: 

•  Defines  a  consensus-based  strategy  that  articulates  the  priorities  of  industry  and  government  in  the  Water  Sector  to 
manage  and  reduce  risk. 

•  Produces  an  actionable  path  forward  for  the  WGCC,  WSCC,  and  security  partners  to  improve  the  security  and 
resilience  of  the  Water  Sector  over  the  near  term  (1-2  years)  and  mid  term  (3-5  years). 

•  Directly  guides  new  product  development  (e.g.,  EPA  can  use  the  roadmap  to  guide  fiscal  year  (FY)  2010  work 
planning  and  FY  2011  budget  formulation). 

•  Creates  a  shared  understanding  of  priorities  to  avoid  unpleasant  surprises,  collectively  advocate  Sector  priorities,  and 
recognize  institutional  constraints  and  different  accountabilities. 

•  Encourages  extensive  engagement  among  all  key  stakeholders  to  strengthen  public-private  partnerships  and  accelerate 
security  advances  throughout  the  Water  Sector. 


Roadmap  to  a  Secure  &  Resilient  Water  Sector 


Top  Priorities 

To  assist  the  Water  Sector  in  meeting  its  Sector-Specific  Plan  vision  and  goals, 
contributors  established  priorities  to  ensure  that  the  most  pressing  and  urgent 
needs  are  addressed  in  a  timely  and  efficient  manner.  The  Working  Group  has 
set  three  top  priority  activities  out  of  25  needed  activities  (listed  in  Appendix 
B)  identified  by  roadmap  workshop  participants.  The  Working  Group 
established  the  following  criteria  for  selecting  priorities.  Priority  activities 
should: 

•  Result  in  a  significant  and  needed  contribution  to  the  Water  Sector’s 
vision  and  goals. 

•  Have  a  high  probability  of  success  within  a  reasonable  timeframe;  near 
term  (1-2  years)  or  mid  term  (3-5  years). 

•  Be  measurable  in  its  effect  on  reducing  risk. 

•  Consider  the  Water  Sector  Coordinating  Council  Strategic  Roadmap  (for  a 
crosswalk  of  CIPAC  priorities  with  WSCC  priorities,  see  Appendix  C). 3 

•  Fall  within  each  stakeholder’s  capabilities  (e.g.,  resources,  authorities, 
countervailing  drivers). 

The  contributors  to  this  roadmap  believe  these  top  priority  actions  must  be  pursued  to  mitigate  the  most  significant  risks 
in  the  Water  Sector:  natural  events  (e.g.  water  quality  &  quantity  impacts  from  floods,  hurricanes,  earthquakes,  ice  storms, 
pandemic  flu,  and  other  catastrophes  depending  on  geographic  location);  economic  issues  (e.g.,  money  constraints,  lack  of 
adequate  resources  planning,  and  uncontrolled  growth  depletes  resources);  and  cyber  events. 

To  be  successful,  each  activity  will  need  the  support  of  both  the  WSCC,  WGCC,  and  security  partners.  If  achieved,  these 
activities  together  will  strengthen  the  Sector’s  ability  to  plan  for  effective  response  and  recovery,  maintain  resilience  during 
a  calamitous  event,  and  garner  support  for  both  disaster  and  risk  mitigation  cost  recovery.  The  top  priority  activities  are 
listed  below. 


Scope 

The  scope  of  the  roadmap  security 
and  resilience  activities  encompasses: 

•  Prevention,  detection,  response, 
and  recovery 

•  Water  and  wastewater 
infrastructures 

•  All  hazards,  such  as  natural 
disasters,  economic  crises,  and 
intentional  physical  and  cyber 
attacks 

•  Top-priority  issues  for  the 
WSCC  and  GCC 

•  Five-year  time  frame 
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Top  Priority:  Develop  templates  for  detection,  response,  and  recovery  plans 
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Benefit;  Improved  decision  making  for  all  utilities  to  quickly  end  accurately  determine  tire  effectiveness 
and  effciency  of  their  detection,  'espouse,  and  recovery  plans  and  take  actions  to  improve  them. 

Most  Aligned  witti  S5P  Goals  &  Objectives:  Recognize  and  reduce  risks  in  ttie  Water  Sector,  improve 
identi'icatiar  a'  potential  threats  (Goal  2,  Objective  3};  Maintain  a  resilient  infrastructure,  identify  end 
implement  key  response  and  recovery  slratey  es  (Goal  3,  Objective  3}. 


Lead:  WSCC 

Co -Lead:  WGCC 

Partners:  CIPAC  Workgroup 
on  Water  Sector 
Preparedness,  Emergency 
Response,  and  Recovery; 
state  drinking  water  primacy 
agencies;  OHS 

Results  Expected;  Near 
term  (1-2  years) 


□eseription/Applicalion:  Water  utilities  arc  confronted  with  an 
array  of  tools  which  can  assist,  or  purport  to  assist,  the  ull  lty  In 
detecting,  respond  ng  to,  and  recovering  from  an  incKlent— whether 
a  natural  disaster  ore  human-induced  event,  Many  utilities  lack  the 
resources  to  sift  through  these  lools  to  identify  the  most  relevant  ard 
useful  applications.  Also,  soma  of  fnese  tools,  though  extremely 
miomnaliye,  exist  in  a  format  and  size  which  can  pose  a  challenge 
for  many  utilities,  Templates  (e.g.,  checklists)  that  a  low  for  tailoring 
such  tools  to  a  utility's  unique  conditions  can  provide  decision 
makers  with  a  way  to  assess  risks,,  define  costs,  choose  appropriate 
actions,  and  determine  the  effect  veress  and  efficiency  of  their 
plana.  In  the  mid  term  (3-5  years},  software  tools,  cased  on  the 
templates,  have  the  potential  to  automata  and  further  simplify  the 
util  ly's  decision-  making  process  as  they  continue  to  update  and 
improve  their  plans. 


0 


Roadmap  to  a  Secure  &  Resilient  Water  Sector 


5 


Top  Priority:  Update  emergency  response  plans 


Benefit:  Increased  potential  for  utilities  to  withstand  and  recover  quickly  from  a  catastrophic  event  by 
updating  emergency  response  plans  to  address  current  needs  and  incorporate  lessons  learned. 

Most  Aligned  with  SSP  Goal  &  Objective:  Maintain  a  resilient  infrastructure,  identify  and  implement 
key  response  and  recovery  strategies  (Goal  3,  Objective  3). 


J 


Lead:  WSCC 

Co-Lead:  WGCC 

Partners:  state  drinking 
water  primacy  agencies; 
AMWA;  AWWA;  AwwaRF; 
NACWA;  NAWC;  NRWA; 
WEF;  WERF;  DHS;  state 
public  utility  commissions 

Results  Expected:  Near 
term  (1  -2  years) 


Description/Application:  In  accordance  with  the  Features  of  an 
Active  and  Effective  Program,  emergency  response  plans  should  be 
updated  on  a  regular  basis  to  reflect  changes  in  the  understanding 
of  risk,  as  defined  in  large  part  by  new  threats,  vulnerabilities,  and 
consequences.  Periodic  review  and  revision  of  an  emergency 
response  plan  can  also  identify  weak  and  unworkable  contingencies 
within  the  plan.  Furthermore,  this  process  can  help  utilities  comply 
with  NIMS  requirements  and  therefore  qualify  for  protective  program 
funds  dispersed  by  DHS.  Ongoing  efforts  by  state  drinking  water 
primacy  agencies  can  assist  small  drinking  water  utilities  as  they 
design,  implement,  and  update  their  emergency  response  plans. 


Top  Priority:  Increase  public  and  political  understanding  of  the  impact  of 
denial -of -service  to  facilitate  rate  recovery  of  resiliency  and  continuity  initiatives 


Benefit;  Increased  success  and  fund  ng  ava  (able  for  a  utility's  security  and  resilience  program  by 
raising  the  value  of  water  among  public  official,  investors,  and  the  communities  served. 

Most  Aligned  with  SSP  Goals  &  Objectives:  Maintain  a  rssil  art  infrastructure,  emphasize  continuity  a 
drinking  water  and  wastewater  services  as  it  pe-tainS  to  Uti  ity  emergency  preuarudness.  response,  and 
recovery  planning  {Goal  3,  Objective  1]. 


Lead:  WSCC 

Co- Lead:  WGCC 

Parmer:  state  disking 
water  primacy  agencies; 
CIPAC  Consequence 
Management  Workgroup; 
DHS;  state  pubic  utility 
commissions 

Results  Expected;  Near 
term  (1-2  years) 


/ 


Description/ Application:  Today,  the  U,S.  population  boroflts  from 
a  'hidden  infrastructure"  built  with  ^vestments  made  over  several 
decades.  As  a  result,  residents  and  pubfec  officials  tend  to 
undervalue  water  and  wastewater  servees.  Catastrophic  events, 
such  as  hurricanes,  ice  storms,  and  earthquakes  can  imcair, 
contaminate,  or  destroy  critical  infrastructures,  with  Ule  costs  of 
addressing  such  damage  In  many  instances  reaching  the  millions  ol 
dollars.  Utilities  often  must  seek  the  approval  of  public  commissions 
or  investors  to  fund  new  nsk  reduction  efforts  or  to  recover  incurred 
emergenoyHreJated  coate-  Education  end  outreach  activities  thet  help 
util  ties  gain  access  fa  pubic  officials  and  consumers  and  educate 
them  on  the  reel  value  of  water  end  wastewater  services—  as  wel  as 
the  consequences  of  impaired  or  lost  service -can  overcome  a 
general  lack  of  awareness  and  gamer  support  for  both  disaster  and 
risk  mitigation  cost  recovery.  This  effort  can  build  on  existing 
initiatives,  such  as  those  under  wey  by  state  drinkmg  water 
programs. 
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Implementation 


The  Roadmap  to  a  Secure  &  Resilient  Water  Sector  is  a  living  document.  By  working  together  to  develop  this  roadmap,  the 
Sector  has  leveraged  a  broad  range  of  operational  and  infrastructure  protection  experience  to  identify  the  most  pressing 
Sector  needs  and  prioritize  actions  that  industry  and  government  can  take  to  begin  immediately  enhancing  water  security 
and  resilience.  While  Water  Sector  members  recognize  that  a  major  infrastructure  disruption — whether  deliberate,  natural, 
or  accidental — may  prompt  changes  in  priority,  they  believe  it  provides  a  sound  and  actionable  path  forward.  Figure  3.1 
outlines  the  main  roadmap  implementation  steps. 

Gain  Buy-In 

The  Working  Group  will  engage  security  partners  to  gain  buy-in  on  roadmap  priorities  and  motivate  leaders  to  step- 
up  and  take  action.  Priorities  will  be  shared  with  the  CIPAC  R&D  Working  Group  to  inform  their  efforts  as  they 
work  to  identify  and  address  R&D  gaps  in  the  Sector.  Priorities  will  also  be  coordinated  with  the  CIPAC  Water  Sector 
Preparedness,  Emergency  Response,  and  Recovery  Workgroup,  the  CIPAC  Consequence  Management  Workgroup,  and 
others  as  needed. 

Figure  2.1  Roadmap  Implementation  Process 
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Develop  Action  Plans 

Water  Sector  leads  will  collaborate  with  their  industry  and  government  partners  to  develop  action  plans  for  implementing 
the  priorities  outlined  in  this  Roadmap. 


Implement  Priority  Actions 

Water  Sector  leads  and  partners  will  execute  the  plans,  assess  progress,  make  necessary  adjustments,  and  deliver  tangible 
results.  Figure  2.2  outlines  the  main  steps  for  tracking  and  updating  progress. 


Communicate  Results 

Water  Sector  leads  will  develop  a  communication  strategy  that  encourages  active  stakeholder  participation  and 
informs  the  public  and  Water  Sector  security  partners  on  progress.  Leads  should  take  into  account  and  make  use  of  the 
communications  capabilities  available  on  the  Water  Information  Sharing  and  Analysis  Center  (WaterlSAC) — the  Water 
Sector's  official  communication  arm — as  they  develop  and  execute  this  strategy.  When  success  is  achieved,  the  results  will 
be  promoted  to  facilitate  widespread  application  throughout  the  United  States. 


Figure  2.2  Tracking  and  Updating  Progress 


Launch  Roadmap  Implementation  Forum 

Interactive  website  hosted  by  WaterlSAC 
Project  oversight  and  coordination  conducted  by  CIPAC  Roadmap  Work  Group  I 


Map  Activities 

State  drinking  water  agencies  AMWA  NAWC 

State  public  utility  commissions  AWWA  NRWA 

DHS  AwwaRF  WEF 

EPA  NACWA  WERF 


CIPAC  WorkGroups 
Academia 
Solution  Providers 


Assess  and  Review  Annually 

Roadmap  project  review  hosted  by  CIPAC  Roadmap  Work  Group 
Partners  realign  work  to  accelerate  progress 


/ 


Report  Progress 

‘  i  of 


review  to  WSCCan 


project 

dWGCC 


8 


Roadmap  to  a  Secure  &  Resilient  Water  Sector 


Appendix  A.  Roadmapping  Process 


The  Roadmap  to  a  Secure  &  Resilient  Water  Sector  was  developed  according  to  the  process 
shown  in  Figure  A.  1  and  described  below. 

Form  CIPAC  Water  Sector  Strategic  Planning  Working  Group 

In  November  2008,  the  Strategic  Planning  Working  Group  established  itself  under 
the  CIPAC  framework. 

Set  Priority  Criteria 

The  Working  Group  conducted  a  series  of  conference  calls  to  design  the  roadmap 
framework  and  establish  criteria  for  selecting  the  top  priorities  for  the  Water  Sector. 

Identify  Top  Priorities 

On  March  3,  2009,  the  Working  Group  held  a  CIPAC  Strategic  Roadmapping 
Workshop  in  Washington,  D.C.  During  the  workshop,  14  representatives  from 
the  Water  Sector,  including  Working  Group  members,  owners  and  operators,  state 
representatives,  associations,  and  subject  matter  experts,  identified  the  scenarios 
that  create  the  highest  risk  to  the  Water  Sector  and  established  the  top  priorities  to 
improve  the  security  and  resilience  of  critical  infrastructures. 

Present  Priorities  to  WGCC,  WSCC,  and  Joint  CIPAC  Committee 

On  March  4,  2009,  Working  Group  members  discussed  the  draft  priorities  with  their 
respective  coordinating  councils.  The  Working  Group  Co-Chairs  then  presented  the 
priorities  identified  during  the  workshop  to  the  Joint  CIPAC  to  gain  further  insight.5 
The  workshop  results  were  published  in  the  Working  Group’s  Strategic  Roadmapping 
Workshop .6 
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Review  Draft  Priorities 


The  Roadmapping  Workshop  presentation  and  report  were  shared  among  workshop  participants,  the  Working  Group, 
and  other  subject  matter  experts  to  confirm  the  meeting  findings  and  further  refine  them. 

Prepare,  Review,  and  Publish  Roadmap 

The  draft  strategic  roadmap  was  developed  and  circulated  among  workshop  participants,  the  Working  Group,  and  other 
key  stakeholders  for  added  insight  and  clarification.  The  comments  of  all  reviews  have  been  integrated  into  this  final 
roadmap  document. 
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Appendix  B.  Summary  of  Water  Sector 

Risks  &  CIPAC  Priorities 

Greatest  Risks  to  the  Water  Sector 

On  March  3,  2009,  the  Working  Group  held  a  CIPAC  Strategic  Roadmapping  Workshop  in  Washington,  D.C.  During 
the  workshop,  14  representatives  from  the  Water  Sector,  including  Working  Group  members,  owners  and  operators,  state 
representatives,  associations,  and  subject  matter  experts,  discussed  the  key  concerns,  trends,  and  drivers  that  will  affect  the 
Sector  over  the  next  five  years. 

Participants  identified  and  prioritized  the  scenarios  that  create  the  highest  risk  to  the  Water  Sector  (Table  B.l).  A 
single  risk  event  can  cause  multiple  effects.  For  example,  a  hurricane  (most  significant  risk)  can  cause  power  outages, 
communication  problems,  and  work  force  issues  (medium  risks).  However,  work  force  issues  can  escalate  to  high  risk, 
especially  when  a  plant  operator  is  unable  to  reach  the  water  treatment  plant  because  flooding  or  debris  make  the  roads 
impassable. 

Finally,  the  group  identified  and  prioritized  the  actions  needed  to  mitigate  the  most  significant  risks  (Table  B.l)  and 
determined  the  appropriate  time  frames  to  produce  results  (Table  B.2). 

Priority  Risk  Mitigation  Needs 

Workshop  participants  identified  25  needed  activities  to  significantly  reduce  risk  in  the  Water  Sector.  To  prioritize  these 
activities,  the  most  pressing  and  urgent  needs  were  selected  according  to  the  following  criteria.  Priority  activities  should: 

•  Result  in  a  significant  and  needed  contribution  to  the  Water  Sector’s  vision  and  goals. 

•  Have  a  high  probability  of  success  within  a  reasonable  timeframe;  near  term  (1-2  years)  or  mid  term  (3-5  years). 

•  Be  measurable  in  its  effect  on  reducing  risk. 

•  Consider  the  Water  Sector  Coordinating  Council  Strategic  Roadmap. 

•  Fall  within  each  stakeholder’s  capabilities  (e.g.,  resources,  authorities,  countervailing  drivers). 

To  be  successful,  each  activity  will  need  the  support  of  both  the  WSCC,  WGCC,  and  security  partners.  Certain  tasks  are 
appropriate  for  the  WSCC  to  lead  and  are  indicated  in  green.  Tasks  appropriate  for  the  federal  government  to  lead  are 
indicated  in  black,  while  state-led  activities  are  in  blue  text. 

The  WSCC  and  WGCC  established  three  levels  of  priority  activities  as  a  template  for  action.  Top  priorities  represent 
the  most  pressing  needs,  and  industry  and  government  must  immediately  step  forward  and  initiate  the  work  on  these 
activities.  As  resources  become  available,  Water  Sector  leads  will  collaborate  with  their  industry  and  government  partners 
to  pursue  additional  priorities  as  deemed  necessary  and  urgent  at  that  time. 
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Table  B.1  Scenarios  that  Create  the  Greatest  Risk  to  Water  and  Wastewater  Infrastructures 


Most  Significant  Risks 


■  Mature  events  (e.g.,  water  quality  &  quantity  impacts  from  floods,  hurricanes,  earthquakes ,  Ice 
storms,  par  oom  c  flu.  and  othor  catastrophes  appending  on  geographic  location) 

•  Economic  issues  (c.g.,  money  constraints,  lack  ol  adeouatc  resources  planning,  and  uncontrolled 
growth  depot  os  resources) 

■  Cyber  events 


High  Risks 


Poo*  communication  from  federal  to  Jocal  level 
fe.g.,  Sector  lac*ra  coherent  strategy  to 
communicate  priorities  ta  boots  on  the  ground) 

Competing  priorities  (e.g,.  utilities  tend  to 
fqous  on  point-source  events,  while  citizens 
and  government  lend  to  pay  mare  attemian  to 
events  with  wide-area  or  national  impacts) 


Lethargy— business  its  usual 
Lack  of  adequate  resource  plan  rung 
Insider  attacks 

Efforts  at  local  utility  level  are  not  baing 
recognised  further  up  (he  chain,  which  may 
result  In  a  lack  of  critical  support  and 
ineffectively  targeted  regulations 


Medium  Risks 


Public  confidence 

*  Bad  news  media  event  fe.g..  individual 
pomt  soiree  event  could  affect  confidence 
In  the  entire  Sector) 

*  Overemphasis  on  security  could  cause 
potential  decline  in  pubic  confidence 

Power  outages 

Declining  workforce  due  1c  lack  of  interest  and 
desire  lor  simple  work 

Lack  of  adequate  carnmun  cal  on  systems  for 
ocai  first  responders 


*  Radiological  attacks 

*  Chemical  attacks 

-  Improvised  r  uclea-  devices 

*  Improvised  eaeplQKve  devices 

*  Political  decisions  constrsmed  by  difficulties  in 
ecalirg  the  big  picture  down  to  aoal  issues 

*  The  meaning  of  security  differa  among  utilities 

*  Poor  attitudes  fe.g. ,  apathy,  public  takra  water 
for  granted,  me-ftiet  approach  limits, 
collaboration} 
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Table  B.2  Actions  Needed  to  Mitigate  Risks  in  the  Near  Term  (1-2  years) 


Top  Priority 


Develop  templates  tor  detection,  response.  &  recovery  plans  {Lead:  SCC) 

Update  emergency  response  plans  (Lead:  SCO) 

Increase  pub  ic  &  political  understanding  of  the  impacts  of  deria  I  -of  -service  (DOG)  ta  facilitate  rate 
recovery  of  resiliency  and  continuity  initiatives  (Lead:  SCO) 


High  Priority 

Conduct  cyber  tracing  workshops  (e.g,,  basic) 
(Lead:  SCC-GCC-FoGorall 

Provide  technical  assistance  to  utilities  (Lead: 
SCC) 

Exercise  emergency  response  plans  (Lead: 
SCC) 

Update  mutual  aid  agreements  (Lead:  SCC 

Enhance  communication  and  coordination 
efforts— Nl MS  (Load:  GCC-Federal) 

Provide  utilities  with  tools  to  arlrCLlate  the 
consequences  oi  DOS  (Lead:  GCC*Fede^af) 


Devetap  em&^ency  communication  lessons 
laamod  (lead:  GCCTodomi) 

Develop  and  conduct  first-responder  training 
(o.g.,  tabletop  exorcises)  (Lead:  GCC-State- 
Federaf) 

Develop  and  deploy  battle-tested 
communications  (Lead:  GGC-federal) 

Educate  decision  makers.  &  public  on  multiple 
benefits  of  security  fe.g,,  health,  Imfrastructuio, 
economic  growth)  (Lead:  GCC-Stete) 


Update  vulnerability  assessments  at  regular 
intervals  (Lead:  SCC) 

Help  states  understand  how  beet  to  target 
funds  by  developing  a  means  for  utifities  to 
justify  resiliency  initiatives  (Lead:  SCC) 

Maximize  repaone  to  metrics  aurvey  (Load: 
SCC) 

Integrate  WaierlSAC's  capebiities  into  training, 
FflsourcES,  etc.,  whenever  possible  (Lead; 

SCC) 

Raisa  Lnderstandirg  of  interdependences 
(Lead:  GCC-Federal) 


Provide  bainlng,  resojroes,  4  planning 
guidance  qn  busi  ness  oorrtinuEty/cqrrtinurty-of- 
□perations  plans  (Leas:  GCC-Federel) 

Update  incident  command  system  — M  MS 
(Leas:  GCC-FederBl) 

Develop  emergency  communication  lessona 
learned  (Lead:  GCC-Federat) 

Encourage  stakeholders  to  conaider  state 
primacy  agencies  as  potential  allies  a 
resoL.  rce  (Lead:  GCC-StaLe) 
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Table  B.2  Actions  Needed  to  Mitigate  Risks  in  the  Mid  Term  (3-5  years) 


Top  Priority 


■  Develop  software  tools  based  on  detection,  response,  &  recovery  plan  templates  to  simplify  and 
automate  the  decision-making  process  for  utilities  (Lead:  SCO} 


Priority 


■  Develop  emergency  communication  recommended  practices  (Load:  GCC-Federal) 

■  Reserve  and  correct  emergency  support  function  (ESF)  struetiMa  (Lead:  GCC -Federal) 
*  Increase  recognition  of  local  service  provider  role  In  ESF  (Lead:  GCC-Federal) 


J 
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Appendix  C.  Crosswalk  of  CIPAC  Priorities 

with  WSCC  Priorities 


Many  of  the  priorities  identified  in  this  roadmap  align  with  the  priorities  identified  in  the  WSSC  Strategic  Roadmap.  In 
Table  C.l,  the  blue  boxes  contain  WSCC  Strategic  Roadmap  priorities,  while  the  bullets  show  the  CIPAC  priorities  from  this 
roadmap  that  most  align  with  them. 


Table  C.l  Crosswalk  of  CIPAC  Priorities  with  WSCC  Priorities 


Align  security  partner  (i,e„  ERA,  OHS )  priorities  with  water  sector  reeds 

•  Increase  p  jbl  c  &  political  unrierstanrisng  of  the  ■  Help  stages  understand  now  beat  :o  target 

impact  01  DOS  to  facilitate  rate  recovery  cl  funds  by  dcvulouiry  a  means  10  justify 

resiliency  and  continuty  Initetivea  nesilierAy  ir  1  ahves 

•  Educate  cecisiar  makers  &  public  on  multiple 
benidils  o'  security  te  g  .  hea  lh,  infrastructure, 
economic  growth 

Develop  strategy  fomnan aging  government  [he.,  ERA,  DHS )  workload 

•  Enhance  com  mumcal  on  and  coordination  efforts — MIMS 

Engage  With  local  emergency  managw 

■  Update  arre’ganty  response  piers  (ERPsl  *  Develop  anc  conduct  f  ■st  raspunder  trair  ng  fe.g., 

■  Exercise  ERPs  tabletop  exercises) 

*  Update  mutual  aid  agreements 

Maximise  response  to  CIPAC  Metrics  survey 

•  Maximize  rasponse  to  CIPAC  Metrics  survey 

Promote  to  governments  flexible  end  scalable  approach  to  Risk  Analysis  and  Management  for 
Critical  Asset  Protection  (RAMCAPJ 

■  Provide  unities  w-th  toe- -a  to  articulate  the  CDrsequences  of  DOS 

Provide  guidance  on  business  contimjlty/continultysyf-operalions  planning  In  the  Water  Sector 

•  Provide  trailing,  resources.,  &  planing  guidance  on  business  oanl  nui:y/continuty-Gf-caeraticns  pans 

Provide  guidance  on  consequence  management  plan  detection  of  contamination  protocols 

■  Provide  uwrties  w*tm  tods  to  articulate  the  consequences  of  DOS 

provide  guidance  on  water  and  wastewater  utility  responder  communications 

«  Develop  emergency  communication  lessons  learned 
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Appendix  D.  Acronyms 


AMWA 

Association  of  Metropolitan  Water  Agencies 

ASDWA 

Association  of  State  Drinking  Water 
Administrators 

AWWA 

American  Water  Works  Association 

AwwaRF 

AWWA  Research  Foundation 

CIPAC 

Critical  Infrastructure  Partnership  Advisory 
Council 

cws 

community  water  system 

DHS 

U.S.  Department  of  Homeland  Security 

DOS 

denial  of  service 

EPA 

U.S.  Environmental  Protection  Agency 

ERP 

emergency  response  plan 

FEMA 

Federal  Emergency  Management  Agency 

ISAC 

Information  Sharing  and  Analysis  Center 

NACWA 

National  Association  of  Clean  Water 
Agencies 

NAWC 

National  Association  of  Water  Companies 

NIMS 

National  Incident  Management  System 

NIPP 

National  Infrastructure  Protection  Plan 

NRWA 

National  Rural  Water  Association 

RAMCAP 

Risk  Analysis  and  Management  for  Critical 
Asset  Protection 

SSP 

Sector-Specific  Plan 

WARN 

Water/Wastewater  Agency  Response 
Network 

WEF 

Water  Environment  Federation 

WERF 

Water  Environment  Research  Foundation 

WGCC 

Water  Government  Coordinating  Council 

WSCC 

Water  Sector  Coordinating  Council 
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